Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c41e231e-4f11-3700-a863-e1198336459d.roa
File:                     c41e231e-4f11-3700-a863-e1198336459d.roa (raw, json)
Hash identifier:          PSh8qftRgd0TritiGTAX7XhWgoHUpniMabVWady4LtU=
Subject key identifier:   AB:F4:5E:F2:9F:47:19:EF:F8:D5:25:3E:DD:2A:9B:81:19:EE:CB:E7
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B44FBF
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c41e231e-4f11-3700-a863-e1198336459d.roa
Signing time:             Sun 21 Oct 2018 08:18:34 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        54.150.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b4:4f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=d518bb1e-b604-4ee0-bdc4-888cf18f9e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:14:02:d7:fc:80:6e:bc:cc:dd:bb:a2:02:ae:
                    9f:53:f6:06:89:67:fa:40:a3:79:a0:f0:49:16:6f:
                    84:3b:be:12:8a:b5:36:ca:33:b8:2a:2a:e4:e7:ac:
                    fd:6b:cb:32:29:88:4d:84:af:10:03:7f:71:18:89:
                    8e:60:94:62:1e:42:bf:60:44:5a:ca:93:2e:70:cd:
                    82:7b:6b:de:f6:b1:62:86:a9:10:ac:90:4a:23:6d:
                    be:72:66:cd:93:36:e8:1d:eb:41:38:8d:fa:e0:b0:
                    da:a0:98:2f:31:18:1b:fc:8b:ae:a5:d1:37:b1:07:
                    a9:d2:a5:3d:a7:fe:b7:ca:58:26:1c:0f:33:a1:3a:
                    90:89:d8:47:63:ec:c3:21:b1:40:d9:e0:d5:84:13:
                    00:ef:32:06:32:ed:09:22:a3:26:af:78:65:e4:c3:
                    7e:45:40:0a:17:71:62:ec:fe:92:5f:c7:c3:de:39:
                    e6:d7:81:8b:12:47:d0:a0:01:8b:58:c3:92:ad:75:
                    68:aa:75:80:30:e8:df:de:9d:f8:64:47:79:65:14:
                    d3:4d:1a:68:e8:28:c9:f3:42:91:b0:d7:0f:67:c4:
                    06:bb:6c:71:be:cc:26:0e:d2:a1:a3:92:fe:5f:da:
                    5d:d9:c5:70:16:b1:8b:9b:bb:62:7c:f8:be:d4:cd:
                    ed:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F4:5E:F2:9F:47:19:EF:F8:D5:25:3E:DD:2A:9B:81:19:EE:CB:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c41e231e-4f11-3700-a863-e1198336459d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.150.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:df:d6:ed:e7:99:79:5c:8c:1f:00:0b:fa:e0:96:51:6a:11:
         a8:14:4a:fe:57:fd:47:cf:cd:5a:ea:4f:79:5a:db:d9:60:99:
         24:49:47:a2:f4:18:de:2d:d1:00:41:d1:32:ad:0f:24:27:71:
         7f:90:31:40:78:9a:02:ab:10:96:cd:ff:01:d3:d5:34:53:9f:
         db:9d:c1:6c:50:e8:89:5c:68:21:e4:bf:ae:0d:e8:d9:4f:42:
         55:8a:97:02:6a:14:45:c0:2f:79:d5:82:5a:42:f1:0a:0e:9a:
         94:dd:c0:29:c2:b7:45:1d:e2:19:d1:fe:27:e4:fc:b3:11:fe:
         bd:59:36:28:f3:20:8c:09:7a:87:f9:06:7c:08:ce:df:7c:c6:
         fd:3b:19:83:f9:da:99:0e:40:d3:92:75:2c:ca:e5:f9:dc:ee:
         6b:a4:82:bc:dd:07:2c:21:77:d8:82:ef:40:38:60:4c:5a:98:
         74:ee:64:7e:b6:72:76:94:f8:a9:79:45:6b:80:7c:70:78:6b:
         07:60:f6:67:69:af:1f:eb:bc:c0:44:5f:6d:23:7d:c4:bd:cb:
         fe:14:ac:74:c9:af:68:f6:14:1c:6f:af:ad:3b:32:03:0b:5d:
         b2:16:6b:53:a5:59:db:fb:86:b9:d5:be:78:8e:b7:c1:39:bf:
         f5:48:bd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----